Security Bulletin: Tivoli Storage Manager Linux x86_64 Client Arbitrary DSO Load Elevation of Privileges (CVE-2014-6185)

Summary

A vulnerability in the IBM Tivoli Storage Manager (TSM) Linux x86_64 client could allow a local user to gain elevated privileges due to an arbitrary DSO load.

Vulnerability Details

CVEID:_ CVE-2014-6185_
DESCRIPTION:
IBM Tivoli Storage Manager could allow a local attacker to trick one of the client executables to load a shared library provided by the attacker and execute arbitrary code on the system as root. This affects Linux x86_64 platforms only.
CVSS Base Score: 7.2
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/98521&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:L/AC:L/Au:N/C:C/I:C/A:C )

Affected Products and Versions

• TSM Client 7.1.0.0 through 7.1.12
• TSM Client 6.4.0.0 through 6.4.2.1
• TSM Client 6.3.0.0 through 6.3.2.2

Remediation/Fixes

TSM Release

| First Fixing VRMF Level|Client Platform|APAR|Link to f****ix
—|—|—|—|—
7.1| 7.1.1.3| Linux_x86_64| IT05713| Download packages for Tivoli Storage Manager 7.1.1 interim fix packages (7.1.1.x) and READMEs have been removed from the web as they contain unremediated security vulnerabilities. The latest version of 7.1 (7.1.6) contains fixes for the most recent known security and product issues, and can be found using this link:
http://www.ibm.com/support/docview.wss?uid=swg24042350
If you have any questions, please contact IBM support.
6.4| 6.4.2.2| Linux_x86_64| IT05713| Download packages for Tivoli Storage Manager 6.4.2 interim fix packages (6.4.2.x) and READMEs have been removed from the web as they contain unremediated security vulnerabilities. The latest version of 6.4 (6.4.3) can be found using this link:
http://www.ibm.com/support/docview.wss?uid=swg24040185
6.3| 6.3.2.3| Linux_x86_64| IT05713| http://www.ibm.com/support/docview.wss?uid=swg24037930** **
7.1 B/A clients in 7.1 TSM for Space Management package| 7.1.1.3| Linux_x86_64| IT05713| Download packages for Tivoli Storage Manager for Space Management 7.1.1 interim fix packages (7.1.1.x) and READMEs have been removed from the web as they contain unremediated security vulnerabilities. The latest version of Tivoli Storage Manager for Space Management (IBM Spectrum Protect for Space Management) 7.1 is 7.1.6 which contains fixes for the most recent known security and product issues, and can be found using this link:
http://www.ibm.com/support/docview.wss?uid=swg24042243
If you have any questions, please contact IBM support.
6.4 B/A clients in 6.4 TSM for Space Management package| 6.4.2.2| Linux_x86_64| IT05713| http://www.ibm.com/support/docview.wss?uid=swg24039454
6.3 B/A clients in 6.3 TSM for Space Management package| 6.3.2.3| Linux_x86_64| IT05713| <ftp://public.dhe.ibm.com/storage/tivoli-storage-management/patches/client/v6r3/Linux/LinuxX86/HSMGPFS/v632/&gt;
Note that interim fixes 6.3.2.1 through 6.3.2.5 have been removed from the above web site as they contain unremediated security vulnerabilities. The latest interim fix (6.3.2.6) should be used which contains a fix for this security issue as well as fixes for the most recent security and product issues.

Workarounds and Mitigations

Remove the Trusted Communications Agent (TCA), module dsmtca, from the TSM client machine. This will disable all non root users from running the TSM Client.